Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
File: UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft (raw, json)
Hash identifier: FU8sSQh3yu7aEHaAvPfb0ghZ3m6jAaRPNrbvCe3ZVcA=
Subject key identifier: 51:18:A9:C7:C0:51:81:9C:7D:76:CF:D2:4E:14:6F:B4:E7:F7:D1:17
Authority key identifier: 50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
Certificate issuer: /CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Certificate serial: 019A288BC7B7936F0ADE48114723BA2AE64F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
Manifest number: 16FB
Signing time: Tue 28 Oct 2025 02:00:40 +0000
Manifest this update: Tue 28 Oct 2025 02:00:40 +0000
Manifest next update: Wed 29 Oct 2025 02:00:40 +0000
Files and hashes: 1: UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl (hash: nkIENzh2cbR4ukSH+zLJ07j3uIsCCIY1JrjxPjyN6Eo=)
2: XmJ8vYGbQYVnd8y-h4wRzi3J_pE.roa (hash: exnN1l7i5NuQ19i+bMh7iG0NXDBSnKZN8vpjyWS2vRc=)
3: XrhvNCYQn9v_ZtENdKVZ3VLduJc.roa (hash: aN/R4IVeQqrz28tH9akl71ra6TmpBihdrIjUuL23MYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:8b:c7:b7:93:6f:0a:de:48:11:47:23:ba:2a:e6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Validity
Not Before: Oct 28 02:00:40 2025 GMT
Not After : Oct 29 02:00:40 2025 GMT
Subject: CN=5118a9c7c051819c7d76cfd24e146fb4e7f7d117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9b:81:48:e7:a8:1d:21:ba:de:b8:d3:f0:42:
32:9a:ea:a6:f2:9d:f7:ca:66:e3:29:5f:7e:6a:43:
65:58:ef:8c:6d:a3:db:a0:e4:7a:6f:c7:63:c3:c3:
8c:ac:e7:93:a2:4e:8d:53:cd:82:12:76:6a:a8:61:
3b:fe:1f:d6:24:cb:24:22:34:1e:08:75:53:b6:b8:
43:3b:70:e3:11:75:e9:dc:15:5c:07:e8:0f:5f:ae:
be:3e:5b:2b:5d:26:3a:8f:67:b6:34:35:f8:99:79:
b0:82:6b:68:05:67:1b:b8:a1:82:d7:a1:0e:c3:6b:
83:e5:5d:bb:7f:5f:fc:d3:7a:16:8e:8d:7b:e4:cf:
cc:5f:ac:74:cf:28:1b:89:b1:78:04:c1:dd:f4:89:
60:29:1a:77:c4:9b:11:3f:3e:0a:be:cd:cc:a9:59:
5e:ad:60:c2:64:c2:b7:b5:4b:21:3f:e7:86:5f:07:
66:7a:e4:e8:0c:51:4c:de:12:dd:2e:b8:ba:b4:33:
d6:7b:3e:7a:03:e4:9d:f6:e2:33:6a:71:20:6c:2a:
02:7a:21:86:18:46:a1:77:e4:fc:47:ba:66:11:75:
6b:b7:e9:21:6b:fd:0c:e8:b3:ea:2b:0f:0a:f7:b3:
8f:da:d7:ea:26:10:51:af:31:ea:3f:31:19:40:02:
32:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:18:A9:C7:C0:51:81:9C:7D:76:CF:D2:4E:14:6F:B4:E7:F7:D1:17
X509v3 Authority Key Identifier:
keyid:50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:36:83:f4:e1:a1:e5:7f:f9:d4:75:d9:23:00:c1:9a:7a:b3:
5a:d5:ec:80:cf:b3:24:e8:04:6a:8b:94:a1:e8:45:62:7b:49:
60:a3:10:cc:ef:28:dc:05:e3:27:51:13:85:05:cb:8e:53:3b:
03:34:89:2a:57:c8:e6:7a:23:ca:75:a9:54:ed:a7:f5:22:1e:
75:0d:31:63:54:b1:be:a5:81:f8:d6:12:62:a1:3e:da:3b:31:
35:02:2c:3b:af:8c:b6:60:6c:9f:4f:62:7a:20:c8:c4:91:b2:
55:b3:de:cd:40:02:1f:b3:3e:48:7f:0e:46:bd:50:71:ad:b9:
57:cc:1b:11:a7:57:a0:fc:16:af:db:0d:b3:fe:e1:10:da:73:
38:7d:ff:2d:4b:ff:37:65:67:37:35:d8:77:cd:2e:3f:f5:d4:
a1:7e:7b:4a:af:3f:01:b3:59:46:8a:5d:d6:0b:bc:2f:c1:7c:
4c:1e:a0:e5:96:00:41:ff:40:7d:4c:61:df:8c:60:ce:8d:f7:
ab:77:bd:c8:18:ff:2f:b5:2b:18:57:5d:e1:83:53:29:59:8d:
81:bb:d0:64:72:6e:f7:e3:d2:bb:a1:88:43:3e:e3:88:71:cb:
58:b7:6b:67:51:45:0c:9f:ea:bc:56:2b:9b:8c:88:fa:6b:d6:
6c:cd:eb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:29:22 2025 by rpki-client